LDAP Integration

A service overview and catalog of LDAP Integration provided by the UC Berkeley IT Service Hub.

Description

The CalNet LDAP (Lightweight Directory Access Protocol) is used to maintain and allow access to distributed directory information services. It's a standard protocol for accessing and managing directory information in a hierarchical structure, often used for authentication and authorization in various systems.

LDAP integration allows campus partners to obtain authoritative information (e.g., employee number, student ID, email addresses, department code) about individuals with a campus affiliation including students, faculty, staff, alumni, and others. Data is stored as attributes which may be owned by campus systems such as UCPath or Student Information Systems.

Benefits & Features

Authoritative Identity Data Source: This service provides directory information for integration with campus systems.
Hierarchical & Standardized Access Control: Using a standard LDAP protocol and a structured organizational unit (OU) hierarchy, the service enables sophisticated authentication and authorization.
Seamless Application Integration: LDAP integration is designed for flexibility, allowing technical staff to manage directory information across various systems. This standardization reduces the technical overhead of manual data entry and helps maintain a secure, consistent security posture across departmental and campus-wide applications.

Getting Started

Campus technologists can get started by reviewing Best Practices for Implementers.

How to apply for Directory Access and set up LDAP integration
Submit a request for a new LDAP integration or a change to an existing LDAP integration.

Service Details

Eligibility	This service is available to Faculty, Staff, and Vendors.
Contact	Technical Support: For troubleshooting or reporting a service interruption, please submit a support ticket or contact the Service Desk at 510-664-9000 . For general questions about LDAP integrations, contact calnet-admin@berkeley.edu. Request the Service: To request new access or modifications to this service, please submit the LDAP Bind Request.
Availability	Available 24/7. Support is provided Monday–Friday, 8:00 AM – 5:00 PM PT, excluding University holidays and curtailment periods.
Cost	There are no direct costs associated with this service.
Data Classification	This service is rated for P4, A4, and R4 data. Compliance: Users are responsible for ensuring data handled within this service complies with the Data and IT Resource Classification Standards.